05 / PROJECTS
Checks permissions before retrieval
A document-access foundation that resolves which records a person may read, designed to sit before retrieval for an AI answer.
Access decisions before model context.
The design puts the check before any data reaches the model, rather than adding an instruction telling the model to behave. The implemented foundation resolves which records a caller is allowed to read; access is denied unless a rule allows it.
The policy tests pair an authorized reader with an unauthorized reader, covering both permitted access and denied requests.
I wrote the specification and directed an AI agent’s implementation of the schema and permission checks. This establishes the access-control layer described in the design.
Scope and context
The implemented scope is the schema and permission checks. Retrieval and AI answering are not implemented, so the project demonstrates the access-control foundation rather than an end-to-end assistant.